Requirements: Prerequisites to use Policy Analyzer and Optimizer

General prerequisites

Before you use Policy Analyzer and Optimizer, verify the prerequisites that apply to your policy type and data source.

  • Integrate each On-Premises Firewall Management Center with Security Cloud Control.

    Note

    In the On-Premises Firewall Management Center, navigate to Integration > Cisco Security Cloud and check the Enable Policy Analysis & Optimization checkbox after integrating with the Cisco Security Cloud.

Access control policy prerequisites

Verify these access control policy requirements.

  • Access control policy analysis is supported on the On-Premises Firewall Management Center operating on Version 7.2 or later. The Cisco-recommended Version is 7.6 or later, because these versions support cross-launch to Policy Analyzer and Optimizer directly from On-Premises Firewall Management Center.

  • Access control policy to be analyzed must be associated with a Firewall Threat Defense device that is managed by an On-Premises Firewall Management Center integrated with Security Cloud Control.

  • The policy is synchronized to Security Cloud Control and appears on the Access Control page.

Network address translation prerequisites

Verify these NAT policy requirements: NAT policy analysis requires specific version requirements and AgenticOps enablement.

  • The On-Premises Firewall Management Center runs Version 7.6 or later.

  • NAT policy analysis is supported on the On-Premises Firewall Management Center operating on Version 7.6 or later. For more information, refer to Enable AgenticOps Insights.

  • AgenticOps is onboarded for the organization and the selected management center data source, or an existing-customer grace period is active.

  • Enable AgenticOps for the Cloud-Delivered Firewall Management Center or On-Premises Firewall Management Center data source that you want to analyze. Choose Insights & Reports > Settings > Policy Analyzer and Optimizer > Data Sources and enable AgenticOps for the management center you want.

  • The NAT rules to be analyzed are enabled. Policy Analyzer and Optimizer excludes disabled NAT rules.

If an On-Premises Firewall Management Center is running a version earlier than 7.6, access control Policy Analyzer and Optimizer may still be available for analyzing access control policy, but Network Address Translation Policy Analyzer and Optimizer is not available for that data source.